1327 matches found
pecl_http buffer overflow vulnerability
peclhttp is a set of tools for supporting HTTP extensions. A buffer overflow vulnerability exists in the URL parsing function of peclhttp version 3.0.0. An attacker can exploit this vulnerability to cause a denial of service callback function pointer override, or execute arbitrary code...
HackerOne: Multiple issues with Markdown and URL parsing
LOOK . 1 html example: copy + past look rezult: mailto:[email protected]" 2 here the situation is more complicated , the fact that I have mail [email protected] [email protected] copy past look rezult: [email protected] [email protected] click one link and two link 2.1 I...
curl: URL request injection vulnerability in parseurlandfillconn()
It was discovered that the libcurl library failed to properly handle URLs with embedded end-of-line characters. An attacker able to make an application using libcurl access a specially crafted URL via an HTTP proxy could use this flaw to inject additional headers to the request or construct...
CVE-2015-7195
The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect...
Design/Logic Flaw
The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect...
CVE-2015-7195
The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect...
CVE-2015-7195
CVE-2015-7195 affects Mozilla Firefox (and Firefox ESR per related advisories) where the URL parsing in Location headers fails to properly recognize certain escaped characters in hostnames. This leads to the parsing being abandoned when an escaped character is encountered, potentially enabling an...
CVE-2015-7195
The URL parsing implementation in Mozilla Firefox before 42.0 improperly recognizes escaped characters in hostnames within Location headers, which allows remote attackers to obtain sensitive information via vectors involving a redirect...
InVision: Content Spoofing - Signout Warning Page
When there's a failure, it sends the user back to a URL like https://███████?kind=error&message=Please+use+one+of+the+options+below+to+log+in+to+█████████ Fix this so the message parameter is parsed and displayed as a flash message. Let we test it on InvisionApp. Orginal link:...
Apple iOS WebViews FaceTime URL Parsing Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS WebViews handling of FaceTime URLs allows remote attackers to exploit the vulnerability to initialize FactTime calls without user authorization...
Mirabilis ICQ 0.99 b 1.1.1.1/3.19 Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/929/info ICQ is an individual to individual chat network which has clients installed on millions of computers around the world. It is, by far, the most widely used and is vulnerable to a remote buffer overflow. When the...
Google Chrome 4.1.249.1059 - Cross Origin Bypass in Google URL (GURL)
No description provided by source. Google Chrome 4.1.249.1059 Cross Origin Bypass in Google URL GURL CVE-ID: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1663 Author: Jordi Chancel Software Link: http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html...
Netscape SmartDownload 1.3 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2615/info Netscape SmartDownload, a download manager add-on for popular web browsers, is vulnerable to a buffer overflow. The library 'sdph20.dll' used by SmartDownload contains an URL parser function that will overflow...
Sambar Server 5.1 Script Source Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4533/info An issue has been discovered in Sambar Server, which could allow a user to reveal the source code of script files. Submitting a request for a known script file along with a space and null character %00, will...
openSUSE Security Update : chromium (openSUSE-SU-2014:0065-1)
Update to Chromium 31.0.1650.63 Stable channel update : - Security fixes : - CVE-2013-6634: Session fixation in sync related to 302 redirects - CVE-2013-6635: Use-after-free in editing - CVE-2013-6636: Address bar spoofing related to modal dialogs - CVE-2013-6637: Various fixes from internal...
libyaml: heap-based buffer overflow when parsing URLs
A heap based buffer overflow exists in the libyaml package such that an attacker by supplying a specially crafted yaml document when parsed by the application might result in remote code execution leading to complete compromise of the system...
CVE-2014-2525 libyaml: heap-based buffer overflow when parsing URLs
Heap-based buffer overflow in the yamlparserscanuriescapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file...
Cisco Prime Infrastructure privilege escalation
Command execution on URL parsing...
libgadu / libpurple / Pidgin multiple security vulnerabilities
Buffer overflow on libgadu protocol parsing. Yahoo!, XMPP, MSN, HTTP, STUN, IRC protocols and URL parsing DoS. HTTP, SIMPLE protocols and MXit emoticons parsing memory corruptions...
Google Chrome < 30.0.1599.66 Multiple Vulnerabilities (Mac OS X)
The version of Google Chrome installed on the remote host is a version prior to 30.0.1599.66. It is, therefore, affected by multiple vulnerabilities : - A race condition exists related to 'Web Audio'. CVE-2013-2906 - Out-of-bounds read errors exist related to the 'Window.prototype' object, 'Web...